updating formatting and adding lifecycle parameter

Author: chelseybeck

.gitignore

@@ -7,11 +7,12 @@
 # Ignore override files
 *.tfoverride
 
-
-
 # Ignore environment-specific files
 .envrc
 
 # Ignore CLI configuration files
 .terraformrc
-terraform.rc
+terraform.rc
+
+# Ignore metadata files
+*.tfstate.lock.info

terraform/aws-users.tf

@@ -1,3 +1,4 @@
+// Create user and assign to group(s)
 module "iam_user_gwenstacy" {
   source = "./modules/aws-users"
 

terraform/backend.tf

@@ -1,9 +1,9 @@
 terraform {
   backend "s3" {
-    bucket         = "hfla-ops-terraform-state"          # Replace with S3 bucket name
-    key            = "devops-security/terraform.tfstate" # Path to the state file within the bucket
-    region         = "us-west-2"                         # AWS region of the S3 bucket
-    dynamodb_table = "hfla_ops_terraform_table"          # DynamoDB table name for state locking
+    bucket         = "hfla-ops-terraform-state"
+    key            = "devops-security/terraform.tfstate"
+    region         = "us-west-2"
+    dynamodb_table = "hfla_ops_terraform_table"
     encrypt        = true
   }
 }

terraform/modules/aws-groups/main.tf

@@ -5,7 +5,6 @@ resource "aws_iam_group" "group" {
   path = var.group_path
 }
 
-# Attaching policies to the group
 resource "aws_iam_group_policy_attachment" "group_policy_attachment" {
   for_each   = toset(var.policy_arn)
   group      = aws_iam_group.group.name

terraform/modules/aws-groups/variables.tf

@@ -15,8 +15,3 @@ variable "policy_arn" {
   description = "List of policy ARNs to attach to the group"
   type        = list(string)
 }
-
-# variable "policy_arns" {
-#   description = "List of policy ARNs to attach to the group"
-#   type        = list(string)
-# }

terraform/modules/aws-users/.terraform.lock.hcl

@@ -7,13 +7,17 @@ resource "aws_iam_user" "user" {
   tags = var.user_tags
 }
 
-# Example of creating a login profile for the user (if needed)
 resource "aws_iam_user_login_profile" "user_login" {
-  user    = aws_iam_user.user.name
-  #pgp_key = var.pgp_key
+  user = aws_iam_user.user.name
 
   password_reset_required = true
   depends_on              = [aws_iam_user.user]
+
+  lifecycle {
+    ignore_changes = [
+      password_reset_required,
+    ]
+  }
 }
 
 resource "aws_iam_user_group_membership" "user_group_membership" {

terraform/modules/aws-users/main.tf

@@ -1,11 +1,11 @@
 # users/outputs.tf
 
 output "user_name" {
-  value = aws_iam_user.user.name
+  value       = aws_iam_user.user.name
   description = "The name of the IAM user"
 }
 
 output "user_arn" {
-  value = aws_iam_user.user.arn
+  value       = aws_iam_user.user.arn
   description = "The ARN of the IAM user"
 }